Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File:                     C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier:          k7wRe+C+WnQePFrlDUX/+xxIYVLjnsqGG9cuM8Ez+XI=
Subject key identifier:   4D:90:75:2D:AB:D6:32:1A:24:E7:30:8F:D0:D0:DE:A9:0F:DC:46:EB
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer:       /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial:       0193568B38F36D372A4586EB7BEED4BBDAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:03:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:04 +0000
Files and hashes:         1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: 4XZ6HfWUU7iUPFPC2PxphK0+3HH8kLn8MLLFw8w7z70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:38:f3:6d:37:2a:45:86:eb:7b:ee:d4:bb:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
        Validity
            Not Before: Nov 23 01:03:04 2024 GMT
            Not After : Nov 24 01:03:04 2024 GMT
        Subject: CN=4d90752dabd6321a24e7308fd0d0dea90fdc46eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d5:fc:f9:e8:87:0b:c8:fa:a5:df:59:2f:4c:
                    99:14:35:bc:ad:f5:d6:f3:5c:47:9b:2e:4e:f4:53:
                    39:92:d4:db:40:fe:f5:b4:33:cd:b6:fe:13:e8:cd:
                    1f:5e:4b:01:d4:57:25:1b:06:60:01:c3:fa:27:ef:
                    85:77:38:e5:eb:9b:de:c2:e9:f5:b2:e2:e8:21:66:
                    0a:3a:39:49:3c:05:76:b1:32:42:5a:a6:68:e0:6e:
                    3b:98:a8:96:21:40:5d:0c:f2:f3:bb:aa:fa:1a:72:
                    e6:51:bb:9c:7c:4a:d3:ad:71:ac:4e:08:6e:d8:86:
                    ca:95:9e:a8:13:3b:c7:5b:4c:44:95:62:54:26:14:
                    5a:88:c9:a9:5a:cc:5a:ff:79:a9:bf:2f:04:1d:e2:
                    af:f1:89:ea:a6:62:92:94:a2:fa:b6:79:6b:0a:93:
                    3f:81:51:90:84:fe:3f:d0:57:e2:30:cf:a9:0b:32:
                    de:7b:b3:9e:bc:0f:5f:76:dd:66:36:82:73:fd:eb:
                    da:b6:34:e9:67:8e:79:4c:41:d0:e4:90:f7:11:09:
                    6d:b0:20:0d:e6:03:6f:b5:bc:02:ac:aa:e6:db:8a:
                    11:67:00:c0:d4:1a:5b:d1:bc:3e:48:91:e1:9d:83:
                    76:85:15:8d:f7:85:90:61:c4:63:32:9d:cd:51:a7:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:75:2D:AB:D6:32:1A:24:E7:30:8F:D0:D0:DE:A9:0F:DC:46:EB
            X509v3 Authority Key Identifier:
                keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:da:9c:ef:ed:6c:8c:00:82:67:04:ec:b8:ec:96:f4:fb:6c:
         6d:75:70:f8:f0:57:ee:45:c3:87:a8:94:0e:48:5d:3d:96:6c:
         d4:f8:0c:4f:f2:a9:4b:bf:d5:1f:58:c6:bc:b5:8f:db:92:48:
         ff:3a:3f:19:58:84:d7:60:a5:e0:14:95:c3:f1:a2:c3:c8:73:
         b8:d4:55:9d:2d:93:96:08:2a:8b:bc:ac:77:4d:30:58:94:53:
         c9:3d:b1:2b:3b:1e:26:c4:eb:37:9a:d4:88:8a:74:62:9c:a7:
         32:96:a1:7a:5f:16:a3:d2:4b:c0:f9:63:e7:89:13:de:86:86:
         17:ef:fd:87:fd:47:d8:d6:10:f2:a2:0e:5e:95:b9:e9:78:33:
         3e:c3:1a:9a:e8:68:1d:fa:b6:ea:00:95:29:13:dd:e5:97:ca:
         1c:6a:db:04:53:72:0e:83:57:20:61:1a:ac:57:ee:96:c8:45:
         66:29:7b:8a:7c:68:46:f1:c3:f5:69:bc:8c:c3:89:92:07:a6:
         e5:6c:e4:40:f3:65:ed:3b:8f:76:08:ed:85:0d:c6:31:97:0e:
         20:c5:a5:63:bd:ce:a2:e5:28:5c:5d:e8:91:29:44:0f:1a:de:
         64:7e:69:d3:4e:ed:21:d8:b0:eb:54:66:88:8d:27:b4:cc:70:
         c8:fe:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----